Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
File: Otu0daQwTIRTQ_2U_ummuIAI44s.mft (raw, json)
Hash identifier: JYrK2iWMvbBvzIIBAxjdLcOKIPe29w7RnKOOu0uTu6A=
Subject key identifier: 87:3A:64:CE:14:65:6E:B2:AD:CD:D8:06:FD:BF:AF:CB:04:EF:C8:26
Authority key identifier: 3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B
Certificate issuer: /CN=3adbb475a4304c845343fd94fee9a6b88008e38b
Certificate serial: 01A0E3D0DC55F49416278C376789D523B6F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
Manifest number: 043E
Signing time: Sun 27 Sep 2026 17:01:50 +0000
Manifest this update: Sun 27 Sep 2026 17:01:50 +0000
Manifest next update: Mon 28 Sep 2026 17:01:50 +0000
Files and hashes: 1: 5bYYwTu5I90wDobRd2VzCTr5zz4.roa (hash: IZsMKAaIZFpVJ3BtSdbVWjKTOC+izlQblksF+19m9fQ=)
2: 75bW-O8JW9bpqCVsnQv-u0YfUJ4.asa (hash: 6ZBAy9NMpontcexIBbvbhfvpcMqQpCB9OdHdBmG3wEE=)
3: Otu0daQwTIRTQ_2U_ummuIAI44s.crl (hash: 0iDm4nh0p8r9vHK8GgN/54j0cxq7LPQJSuA2c5A2YI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:dc:55:f4:94:16:27:8c:37:67:89:d5:23:b6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adbb475a4304c845343fd94fee9a6b88008e38b
Validity
Not Before: Sep 27 17:01:50 2026 GMT
Not After : Sep 28 17:01:50 2026 GMT
Subject: CN=873a64ce14656eb2adcdd806fdbfafcb04efc826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:61:61:95:28:85:85:8b:fa:83:94:85:d2:
eb:03:25:ef:96:7e:4c:f4:b8:9e:14:23:e6:ca:60:
3a:af:bf:4a:14:b2:27:b5:9e:a0:7c:d7:c3:9f:9b:
58:0b:71:96:a4:95:bc:4b:c0:66:99:2f:52:03:98:
f0:6d:78:c4:ac:cc:c3:2a:5e:2b:af:7c:30:de:77:
6c:c3:f6:c4:f5:7b:01:46:20:29:8e:4d:78:f5:74:
74:38:02:9c:35:f1:7b:ff:50:65:6f:9a:e9:ee:05:
dd:d8:a8:d9:21:49:0e:52:75:24:b7:d6:c4:07:c3:
a9:6c:25:d7:03:ff:5a:e6:33:ca:4c:01:fe:29:aa:
66:db:c3:2b:fe:88:46:82:66:f2:cc:cc:77:92:2a:
75:ff:62:31:43:cc:f5:f2:a2:b1:98:e8:95:b7:5a:
2a:98:92:8f:ec:0b:9a:35:ff:ec:dd:b6:17:68:77:
c7:4e:c0:07:19:1e:ee:f6:af:a3:df:ad:e5:e5:27:
d0:d2:47:4d:cc:56:92:10:16:c0:53:03:5e:70:65:
6d:d9:cf:2e:46:24:d9:92:9e:df:61:c3:bc:a4:4a:
fc:49:ad:05:6b:05:64:01:a3:c6:4e:52:d9:16:89:
e8:67:8c:65:04:f2:07:0c:c2:76:7a:cc:f8:62:45:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3A:64:CE:14:65:6E:B2:AD:CD:D8:06:FD:BF:AF:CB:04:EF:C8:26
X509v3 Authority Key Identifier:
keyid:3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d3:97:90:ac:a9:3c:c3:8c:1c:e2:ad:f3:ee:dd:8b:e5:de:
1d:ae:b9:79:86:5f:98:47:62:9b:7b:68:d8:9f:bc:8e:46:a1:
19:92:1a:32:44:87:a9:69:b8:38:c3:df:7a:f9:c6:21:56:e1:
f6:b8:cb:9b:ec:6c:58:3c:da:77:74:76:86:cc:e0:f0:0a:bf:
de:a2:30:84:c4:68:a7:d0:f3:eb:1b:41:d9:e1:49:c2:da:35:
10:1d:4d:53:51:ce:54:2f:bc:c0:0d:8a:57:6d:82:92:22:e1:
42:8d:f3:c3:8d:c4:fa:5b:28:f4:20:18:c9:e1:1f:b4:90:63:
94:e2:07:84:56:1c:16:24:2a:67:1b:c3:bf:e3:35:ad:a6:bc:
08:b7:cb:82:37:fe:47:b4:40:9a:0b:e7:40:31:d9:80:25:8f:
65:ed:a6:05:6d:1e:ad:db:07:23:19:10:bd:f8:9b:27:cc:35:
ff:1c:5e:6f:ae:82:53:5f:4d:bd:6b:b2:5a:59:e7:e9:7f:38:
fb:6f:3a:30:71:11:ca:cb:52:e2:a0:d6:a4:bb:4e:61:53:8a:
5d:79:62:e3:8d:8f:14:8a:98:a8:75:ea:b5:31:ec:25:98:6d:
b4:bb:d1:57:05:3a:ff:ff:fc:fd:c9:dd:a5:d9:81:b1:dc:ce:
fe:25:62:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:48:53 2026 by rpki-client